This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: MYz6Z+L6qCmLNeRyQZFuqcphA5F7aL67unptYaxtJlM= Subject key identifier: B8:8A:39:D7:3C:2D:59:0E:A7:E4:83:4B:61:14:A1:2F:64:F0:FA:16 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 0844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 079B Signing time: Sat 24 Jan 2026 21:40:44 +0000 Manifest this update: Sat 24 Jan 2026 21:40:44 +0000 Manifest next update: Sat 31 Jan 2026 21:40:44 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: zInYC67V7zt3DQUPJd0YsUd94rXsHYL6DX0ZDvtbtCg=) 2: 632982C478E411F0B36C2173C4F9AE02.roa (hash: DqMi1I/Izzb5oOVCjzKuAyd4KmWH/EJc0rOqPfPKcVQ=) 3: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 4LAsvPxFJVP/38iRypn40TaMOPz9lx58IyU7j8BYYnw=) 4: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: 4gpvAniE6HSvKn1r2+8S4mH+/QJhWbiSRqm86gbRBaI=) 5: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: m3Pbqfmbzl/hnDC5M2vHfiVHlGiXfS/3+4feaLZEbXM=) 6: 03BA8B36824411EF94479387C4F9AE02.roa (hash: J+iY4JEtmySFwOCqaP72SvJVDZLPvNEiLKvI7NyNzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2116 (0x844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Jan 24 21:40:44 2026 GMT Not After : Jan 31 21:40:44 2026 GMT Subject: CN=69753c5c-bf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:44:5b:c8:b5:78:a3:50:7b:04:10:81:68: 88:6b:eb:e4:f5:e6:6d:8e:31:67:ea:33:47:ac:d7: f9:3a:21:25:1c:ba:ef:0f:5e:f4:ca:70:63:37:eb: 0e:ce:1f:a2:ec:99:59:11:5d:7b:22:66:12:6c:d4: f0:cf:7e:ce:c7:9d:12:7f:3a:0b:9e:77:7e:f7:bb: 55:34:2c:b4:c0:9a:9a:08:f2:4c:57:d2:30:f7:18: ec:97:22:91:07:fa:b1:1f:5e:d7:ae:db:2d:43:12: 4a:c6:e7:20:c3:3f:65:75:c6:dc:1d:c9:d7:37:04: 29:11:c1:59:f0:79:da:0a:6b:b5:d2:27:c6:b1:a3: ac:92:9e:08:48:a7:48:c8:f5:34:f7:5f:e0:25:de: e4:03:30:e5:79:1d:88:27:17:2b:35:73:0c:4d:da: 9b:01:9d:41:47:96:e0:4c:8e:91:54:03:f3:2f:45: d2:b2:b9:29:5a:2d:c8:e8:de:8a:26:66:0f:5e:45: 53:e5:15:bf:62:10:12:7f:35:c5:57:f8:87:03:7d: d7:8c:57:df:c0:7c:54:5d:c2:c6:56:52:4d:f0:ba: 8f:a4:59:9f:2a:fd:f3:00:cb:4a:50:8e:09:59:1d: 03:23:bf:aa:f6:c8:df:c1:ff:e5:16:c4:bc:65:07: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8A:39:D7:3C:2D:59:0E:A7:E4:83:4B:61:14:A1:2F:64:F0:FA:16 X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a9:f0:ce:15:39:2e:8f:a5:81:49:e5:bb:55:f1:84:84:0d: bc:fd:92:36:10:15:e1:a2:16:8c:d4:64:d6:d5:c1:58:b6:89: 28:25:e8:b3:6b:d8:a8:3e:58:01:87:33:e3:29:bf:ad:88:c3: 76:5e:e9:bd:41:a1:24:e4:15:df:48:75:17:fd:05:ec:be:63: 25:58:f3:fe:a2:52:34:81:2b:54:ff:5a:c6:f3:88:cd:30:1c: 83:20:ef:32:18:91:55:db:fa:c5:be:da:f0:0a:aa:cd:75:3b: b7:8d:97:c9:ef:11:1a:6e:c1:2f:d1:d0:76:28:01:e7:73:5e: 21:bf:0d:5e:23:3e:2a:eb:8d:34:72:db:f9:bb:d8:9a:2e:cd: 58:a6:f1:d5:ca:a6:12:1e:60:46:69:df:23:ba:35:1d:1a:f9: 99:ce:01:3c:88:ed:a6:30:95:06:eb:bb:ba:ba:e2:d0:e9:b1: ba:4e:48:1b:d4:80:c6:81:3d:6f:35:17:18:8e:bd:35:fc:fb: a9:ed:34:fb:a5:cc:06:a4:72:61:10:c5:c3:2a:d7:0f:4b:4c: 68:7c:a7:1c:a7:e4:11:dc:a1:e5:a1:b6:85:02:55:eb:73:be: 6c:f0:4a:c3:54:c4:2f:dd:12:88:40:a9:16:91:a9:33:47:ef: 09:13:18:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjYwMTI0MjE0MDQ0WhcNMjYwMTMxMjE0MDQ0WjAYMRYwFAYD VQQDDA02OTc1M2M1Yy1iZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO9EW8i1eKNQewQQgWiIa+vk9eZtjjFn6jNHrNf5OiElHLrvD170ynBjN+sO zh+i7JlZEV17ImYSbNTwz37Ox50SfzoLnnd+97tVNCy0wJqaCPJMV9Iw9xjslyKR B/qxH17XrtstQxJKxucgwz9ldcbcHcnXNwQpEcFZ8HnaCmu10ifGsaOskp4ISKdI yPU091/gJd7kAzDleR2IJxcrNXMMTdqbAZ1BR5bgTI6RVAPzL0XSsrkpWi3I6N6K JmYPXkVT5RW/YhASfzXFV/iHA33XjFffwHxUXcLGVlJN8LqPpFmfKv3zAMtKUI4J WR0DI7+q9sjfwf/lFsS8ZQdLMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiKOdc8 LVkOp+SDS2EUoS9k8PoWMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoqfDOFTkuj6WBSeW7VfGEhA28/ZI2EBXhohaM1GTW1cFYtokoJeiz a9ioPlgBhzPjKb+tiMN2Xum9QaEk5BXfSHUX/QXsvmMlWPP+olI0gStU/1rG84jN MByDIO8yGJFV2/rFvtrwCqrNdTu3jZfJ7xEabsEv0dB2KAHnc14hvw1eIz4q6400 ctv5u9iaLs1YpvHVyqYSHmBGad8jujUdGvmZzgE8iO2mMJUG67u6uuLQ6bG6Tkgb 1IDGgT1vNRcYjr01/Pup7TT7pcwGpHJhEMXDKtcPS0xofKccp+QR3KHlobaFAlXr c75s8ErDVMQv3RKIQKkWkakzR+8JExjO -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:27 2026 by rpki-client